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BIOMETRT C CERTTFT<-A TFQ 
BACKGROU ND OF THE INVEMTTfVM 

1- FIELD OP THE TNVFN TTnM 

This disclosure relates generally to the field of secure 
communications, and in particular to the issuance and 
15 management of certificates for authenticating messages. 

2 - DESCRIPTI ON OF RF.TATF.D AFT 

The use of computer networks and telecommunication systems 
for various transactions has markedly increased in recent 
20 years. Traditional transactions such as shopping, purchasing, 
banking, and investment services have experienced growth in new 
directions due to the application of computers and 
telecommunications. 

While traditional transactions have heretofore been 
conducted typically on a person-to-person basis, many 
telecommunication-based transactions are conducted remotely and 
sight-unseen; i.e. the participants in telecommunication-based 
transactions may never meet. 

With such telecommunication-based transactions, there is 
an increasing need to recognize and verify the authenticity of 
a remote user of electronic services, including such services 
involving consumers of all types of electronic transactions 
such as purchases over the Internet, home banking, electronic 
transfers of funds, and electronic brokerage services. Such 
electronic transactions may also involve users of remote 
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repositories of data, for example, to access classified 

records, medical records, billing records, and unclassif ied but 

t 

sensitive data, such as company records. Other relevant areas 
requiring adequate or even absolute security include 
5 authentication of signers of electronic documents such as 
contracts. In general, any electronic service of value, 
provided over a local network or a public network, requires 
authentication of the requester in order to protect the value 
of the service. More valuable services typically require a 

10 greater degree of authentication. 

Historically, access to electronic services has been 
provided through identification techniques such as account 
names and authentication techniques such as personal 
identification numbers (PINs) and passwords. Such 

15 authentication techniques have not proven to be very secure 
since PINs and passwords are often easily guessed, hard to 
remember, or subject to discovery by exhaustive automated 
searches. Recently, digital certificates have emerged as a 
leading candidate for authenticating electronic transactions. 

20 Ideally, a digital certificate, such as those defined by 

the X.509 and ANSI X.9 standards, allows users or buyers and 
sellers to authenticate electronic documents and electronic 
transactions in a manner analogous to the authentication of 
documents by a Notary Public in person-to-person transactions. 

25 The combination of cryptographic techniques, including public 
key cryptography, and the use of digital certificates provides 
greater integrity, privacy and a degree of authentication for 
on-line electronic transactions which instills a greater level 
of confidence in the electronic services consumer. 

30 For example, such authenticating certificates in the prior 

art may be generated by concatenating a message and a public 
key with a set 10 of data as shown in PIG. 1, which may be in a 
sequence and which may include a subject unique ID 12 
corresponding to the subject; that is, the individual or entity 

35 such as a corporation, having the public key. As shown in FIG. 
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1. other fields tn Che set 10 of data may include a version 
number, a serial number £o r the certificate with respect to a 
sequence of generated certificates, the name of the issuer, a 

s certiflr C °. deCermine » « validity of the 

certificate, a subject name identifying the user or individual 
sending the transaction, a issuer unique ID number, and other 

c " ™° nS : ndlCaCIn9 PriVile9eS a " rt — °' ^ 
certificate, such as access privileges. 

The subject unique ID 12 of the user may include M bits 

10 representing, for example, a social security number or a 

P.ss^associated with the user sending the transaction. 

M - 50 bite - 6 bytes or less. 

15 the set'xo^tT'tH C r 1£iCate ' the venation of 

oata is th " PUtliC key and Che faction 

such'a. PrOC « 3Bed - *• example, using a hash function 

ThI hashed 0 " 6 ;" 3 aShin3 £U " CCi0n ' t0 9enerate 3 ■—»- -lue 

p Lat; .ey 1 : u : h 18 chen si9ned; that is - —»>*-• «- 

io The dioit^ Uaer t0 9enarate a digiCal -^ture !4. 

certi i: ^nh" 6 14 ^ ^ W ~ i t0 authenticating 
for , ^ ■nassage. such as an electronic transaction 

for transmission over, for example, a network. 

The X.509 and ANSI X.9 standards described above 
incorporate a hash function to generate nnigue digital 

5 signatures 1, from a respective set 10 of data Such 

hashing functions enab!e the transaction da" to T " 
computationally infeasible to derive solely from the hash 

0 certi?"" 6 ^ ln Prl ° r art ° f authenticating 

certificates incorporating digital certificates improves 
transactions employing electronic authentication, it still 
falls short of actually authenticating a human transactor „ „ 
as a consumer instead, such digital certificsteTTn the p'or 

signature. Sxnce private keys are physically 
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stored on computers and/or electronic storage devices, such 
private keys are not physically related to the entities 
associated with the private keys. For example , a private key 
is assigned to an entity, which may be a group of people, an 
5 organization such as a company, or even groups of 

organizations, and so private keys are not limited to actual 
human individuals. 

Identification indica of individuals may be subdivided 
into three broad categories: indica based on the physical 

10 characteristics of the individual, that is, what the individual 
is; indicia based on one's knowledge, such as passwords known 
to the individual; and indicia based on assigned information, 
that is, what another individual has associated with the 
identified individual, or what the identified individual 

15 chooses with which to be associated. The first category having 
physical indicia relates to the biometric data of an 
individual, and includes characteristic features such as 
genetic composition, fingerprints, hand geometry, iris and 
retinal appearance, etc., which are unique to each individual, 

20 with known exceptions such as the identical genetic 
compositions of twins. 

The second and third categories having known and/or 
assigned indicia includes information which the individual 
knows and/or is charged with memorizing and divulging for 

25 authentication, such as social security number, mother's maiden 
name, access codes such as long distance calling card numbers, 
and personal passwords. The second category also includes 
information and/or objects which the individual owns and/or is 
charged with carrying and divulging for authentication, such as 

30 driver's licenses and passports. 

Private keys are assigned indicia. Accordingly, the lack 
of physical identification of a human transactor with a private 
key is a flaw in authentication techniques in the prior art 
using such private keys. Other authentication and security 

35 techniques in the prior art are similarly flawed, since many 
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authentication and secur^v 

indicia of th. 7 techni <^* rely on identification 

indicia of the second category. 

Techniques are known in the art for authenticating an 
individual based on identification indie* of the first 
5 category; that is, by physical characteristics. For exarcol* 

~ ^e. — F— 

i :::::: L o : r r sieai — 

20 summary m t hr nffiattieM 

c l as si "ica e r:!° 9 " l2 : d that MO " etric "«ntirication and 

Is t Lc™ aUthentiCa "° n " «™-e 
increased security and accuracy 

* herein" SST^irT 1 "* 1 " — « Closed 

bindino ^ K " end - CO -^ security mechanism 

Bio«tric data is pr e - stored as Metric certificates in 
a biometric database nf w< . A ^"caces m 

system by recei^a d!t ° Ce " i£iC " e —9— »t 

, c * y receiving data corresponding to physical 

3S cnaracteristics o f registered users tnrougn Hwtric inpnt 
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device. Subsequent transactions to be conducted over a network 
have transaction biometric data generated from the physical 
characteristics of a current user, which is then appended to 
the transaction first data, and which then authenticates the 
5 user by comparison against the pre-stored biometric data of the 
physical characteristics of users in the biometric database. 

BRIEF DESCRIPTION OF THE DRAWINGS 

The features of the disclosed biometric certification 
10 system and method are readily apparent and are to be understood 
by referring to the following detailed description of the 
preferred embodiments of the present invention, taken in 
conjunction with the accompanying drawings, in which: 

FIG. 1 illustrates an authenticating certificate in the 
15 prior art; 

FIG. 2 illustrates a biometric certificate of the 
disclosed biometric certification system and method; 

FIG. 3 illustrates a biometric certificate registration 
apparatus ; 

20 FIG. 4 illustrates an electronic transaction transmission 

section; and 

FIG. 5 illustrates an electronic transaction reception and 
processing section. 

25 DESCRIPTION OF THE PREFERRED EMBODIMENTS 

Referring in specific detail to the drawings, with common 
reference numbers identifying similar or identical elements, 
steps, and features, as shown in FIG. 2 the present disclosure 
describes a biometric certification system and method for 

30 generating biometric certificates from a set 16 of data, 
including a subject unique ID 18 and biometric data 20. A 
digital signature 22 generated using data set 16 is then 
appended to the data set 16 to form the biometric certificate, 
as shown in FIG . 2 . 

35 The disclosed biometric certification system is shown in 
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PIGS. 3-5, having biometric registration section 24 shown in 
PIG. 3, a transmitting section 40 shown in FIG. 4, and a 
receiving section 42 shown in FIG. 5. The biometric 
registration section 24 processes user biometrics and 
5 associated inputs to generate biometric certificates which are 
unique to the user, and which are stored in a memory such as a 
biometric database and/or a smart card memory. Once such 
biometric certificates are stored, a first user may conduct 
bxoraetrically-secured electronic transactions sent from the 

10 transaction transmission section 40 of FIG. 4 to the 

transaction reception section 42 of FIG . 5, at which the 
electronic transaction is authenticated and processed. 

Referring to FIG. 3, the registration section 24 has a set 
of input devices, including a registration biometric input 

15 device 26 and a user data input device 28. The biometric input 
device 26 generates registration biometric data from the 
physical characteristics of the user, such as fingerprints 
hand geometry, iris and retinal appearance, and speech 
patterns . 

20 The registration biometric input device 26 may include 

visual cameras and/or other visual readers to input 
fingerprints, hand geometry, iris appearance, and retinal 
appearance. For example, companies such as IDENTIX, FUJITSU 
and AUTHENTEC provide such equipment for reading f ingerprints, 
25 while RECOGNITION SYSTEMS provides equipment to read hand 
geometry. EYE-DENTIFY is an example of a company which 
provides retinal imaging devices, while IRISCAN and SENSAR are 
examples of companies which provide iris imaging devices 

Alternatively, the registration biometric input device 26 
30 may be adapted to receive audio characteristics of a user For 
example, a microphone in conjunction with a speech digitizer 
may be used to receive and digitize speech. Such companies as 

T-NETIX, and ALPHA- TEL provide such equipment for 
receiving and digitizing speech to generate corresponding 
35 biometric data. 
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Biometric input devices known in the art may be used to 
receive other physical characteristics such as facial and body 
appearance via, for example, a camera, as well as the genetic 
composition of the user by means of genetic material gathering 
5 procedures, such as blood lancets. 

The biometric certificate as shown in PIG. 2 may be 
generated by processing the registration biometric data from 
the registration biometric input device 26, processing the user 
input data such as a user ID from the user data input device 

10 28, and processing the public key 30 of the user at a biometric 
certificate generator 32 of a registration authority 34. Such 
input data are processed with the private key 36 of a 
certifying authority to generate a digital biometric 
certificate 38 which is sent to the memory for storage and 

15 subsequent use to authenticate the first user and associated 
electronic transactions of the first user. 

The registration biometric data 20 to be incorporated into 
the biometric certificate of FIG. 2 is obtained directly from 
the physical characteristics of the subject through the 

20 biometric input device 26. The subject unique ID 18 of the 
user may include M bits, in which typically M - 50 bits •» 6 
bytes or less, while the biometric data 20 typically includes 
much more data than the subject unique ID 18. Generally, the 
biometric data 20 has N bits in which N may be very large, such 

25 as about 500 bytes. In fact, the amount of the biometric data 
20 is unlimited; for example, a fingerprint may be visually 
scanned to any resolution to obtain key fingerprint aspects 
which uniquely distinguish fingerprints, or alternatively to 
obtain data representing pixels of the entire fingerprint. 

30 Accordingly, the biometric data 20 may require large amounts of 
memory for storage such as 2 kB or even 4 MB. Accordingly, in 
the preferred embodiment, N is much greater than M. 

Prior to use of the disclosed biometric certification 
system and method, the biometric database 66 is built using, 

35 for example, a registration process in which individuals are 
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required t o provide proof of ^ ^ 

xnformatron such as a birth certificate, a driver's license 
current bank account data, credit card account data, etc to be 
provided to a registration authority. Once the registration 

iir? iseatisfied uith such pr °° f - "» ^""c«t 

b :™!T " " e ° tered int ° syste. 24 and 

brometrrc measurements are then taken concurrently using at 
least one biometric input device 26. as shown in fig " 
_ Such stored biometric measurements fors the pre-stored 

ITZ TXC ". in WOmetriC « ""eh corresponds 

to the pre-registered individuals who have undergone the 

registration process described above. Accordingly, pre 

registered individusls may bs properly authenticated while 

IS ZTllT indiVldUalS ~ —--r 

The biometric certificates -*n a « *-k^ 
. , tlcaces 38 are then sent to be stored 

» a memory, such as a biometric database or a memory of a 
smart card, as shown as the memory 66 in pig. 5 The 
registration system 24 of pig. 3 may be located'at a central 
20 registration station associated with a network, such that the 
corresponding biometric certificates of a user may oe Erectly 

ItZTJ T red ^ *— » ™» - * central " 
sZr . ° £ 3 neCW ° rk ~ dividual memory of a 

2S databasTas 0 tV he °~* ' *— «» central biometric 
database as the memory 66 may serve a network of users 

conducing trahssctions. such as electronic commerce (E- 
commerce, . over the Internet and other networks. 

" m^re'store " ^ "~ ^ ^ —** 

Referring to FIGS. 4-5, to conduct an electronic 

The f xrst user uses a transaction biometric input 
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device 44 to generate transaction biometric data 46 as 
contemporaneous biometrics associate with the first user. The 
first user also generates transaction first data 50 through a 
transaction data input device 48. For example, the transaction 
5 first data 50 may include selections of products to be 

purchased over the Internet, or may include electronic funds 
transfers through an ATM. The transaction first data 50 also 
includes user ID data identifying the first user and 
associating the first user with the remainder of the 

10 transaction first data. 

Both of the transaction biometric data 46 and the 
transaction first data 50 are sent over the network 60 
unchanged and in the clear, or optionally encrypted by 
additional encryption techniques known in the art, to be 

15 received by the transaction reception section 42, as shown in 
FIG. 5. 

In addition, at the transaction transmission section 40 of 
FIG. 4, both of the transaction biometric data 46 and the 
transaction first data 50 are processed, for example, using a 

20 first hash' function 52, such as a one-way hashing function, to 
generate a first hashed value. RSA and SHA-1 are examples of 
public key cryptographic methods and one-way hashing which may 
be used for such encryption and hashing functions. The RSA 
method is described, for example, in U.S. Patent No. 4,405,829 

25 to Rivest et al., which is incorporated herein by reference. 
The SHA-1 method is described, for example, in U.S. Patent No. 
5,623,545 to Chi Ids et al., which is incorporated herein by 
reference. 

The first hashed value is then sent to a digital signature 
30 function 54, in which the hashed value is signed; that is, 
encrypted, using the private key 56 of the first user to 
generate a digital signature 58, incorporating the first hash 
value. The digital signature 58 is then sent to the network 
60. 

35 The set of data transmissions constituting the transaction 
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biometric data 46, the transaction first data 50, and the 
digital signature 58 may be sent as separate bitstreams and/or 
data packets, or otherwise may be sent together by appending 
the associated data sequences using a concatenator, such as an 
5 adder for bitwise adding of the data sequences. In addition 
software may be used to append such data. The data 46, 50 and 
58 may be sent to the network 60, which may include telephone 
networks, satellite communications, and/or the Internet 
Referring to FIG. 5, after receiving the electronic 
10 transaction from the network 60, the receiving section 42 sends 
the user ID data 62 from the transaction first data 50 to be 
sent to a biometric certificate extractor 54. The biometric 
certificate extractor 54 uses the user ID data 62 to access a 
corresponding biometric certificate stored in the memory 66 
15 such as the biometric database Or smart card memory. That is 
if the first user had previously stored corresponding biometrL 
certificates generated from biometric characteristics of the 
first user using the registration system 24 shown in FIG 3 
the biometric certificate of the first user may be indexed ' 
20 according to the user ID data, such as the social security 
number, of the first user. 

The memory 66 may receive the user ID data 62 or 
otherwise may receive a command from the biometric 'certificate 
extractor 64 to retrieve any biometric certificate 
25 corresponding to the user ID data 62 of the first user if 
none are available, the receiving section 42 may generate a 
rejection signal, for example, at the biometric certificate 
extractor 64, to indicate that no biometric certificate is 
available . 

30 Accordingly, any user requesting authentication of an 

electronic transaction but failing to be registered; that is 
to have a corresponding pre-stored biometric certificate stored 
an the memory 66, is not authenticated. The receiving section 
42 may generate a corresponding message of non-authentication 
and may also send such a message through the network 60 to the 



35 
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transmitting section 40 to indicate no authenticity in the 
transaction. 

Otherwise, if a biometric certificate is available for the 
first user having corresponding user ID data, the biometric 
5 certificate 68 is retrieved and sent to the biometric 

certificate extractor 64 to decrypt the biometric certificate 
68 using the public key 70 of the certifying authority. Thus, 
the biometric certificate extractor 64 obtain the decrypted 
registration biometric data 72 and the decrypted user public 

10 key 74 associated with the first user. 

The decrypted user public key 74 is then sent to a 
decrypt or to decrypt the digital signature 58 sent over the 
network 60 from the transmitting section 24. The decryptor 76 
then extracts the first hash value which was incorporated into 

15 the digital signature 58 by the first hash function 52. 

The receiving section 24 authenticates the first hash 
value by attempting to recreate the first hash value using a 
second hash function 78 which is identical to the first hash 
function 52 of the transmitting section 24. The second hash 

20 function 78 receives the transaction biometric data 46 and the 
transaction first data 50 from the network 60, which were sent 
from the transmitting section 24 in the clear, or optionally 
encrypted by additional encryption techniques known in the art. 
The second hash function 78 thus generates a second hash value 

25 from the same input data applied to the first hash function 52. 
The first and second hash values are then compared by a 
first classifier 80, such as a comparator or matching routines 
in software f for determining a match between the first and 
second hash values. A first validation signal 82 is generated 

30 to indicate whether or not both independently generated hash 
values match. 

If both match, then the receiving section 42 thus 
determines that both of the transaction biometric data 46 and 
the transaction first data 50, in combination, are authentic 

35 and have not been modified during transmission over the network 
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60. 



in addxtion, the receiving section 42 determines whether 

the electronic transaction is indeed from the indicated user 

corresponding to the transaction biometric data 46; that is 

5 transaction biometric. data 46 may not be authentic, or 

alternatively, the decrypted user public key 74 may be a public 
key 7 4 commonly shared by a specific group Qf P 

employees of a specific company. 

Accordingly, the receiving section 42 compares the 
10 bxometric data of the first user generated during the 

transaction, as the transaction biometric data 46, with the 
regxstration biometric data generated at an earlier date from 
the f xrst user during a registration process using the 
registration system 24. The registration biometric data, which 
IS xs decrypted by the biometric certificate extractor 64 to be 
the decrypted registration biometric data 72, is applied to a 
second classifier 84 to be compared to the transaction 
bxometric data 46 which is sent over the network 60 in the 
clear or optionally encrypted by additional encryption 
20 technxgues known in the art. 

The second classifier 84 may be a comparator, or 
alternatively a software routine or other hardware/software 
devxces xmplementing data matching techniques, for comparing 

25 th T C ^ ° btain 3 d6CiSi0n Value " Alternatively 

25 the second classifier 84 may be a trained neural network and/or 
a fu ZZ y l ogic clasgifier for classifying whether Qr 

an error tolerance, the sets of biometric data 45, 72 Li 
obtaxned from the same individual using biometric input 

30 irnalT' fT Cla8SifiCation *°* authentication of 

30 xmages and data sequences using neural networks are described 

for example, in U.S. Patent No. 5.6X3,620 to Eccles. which^s' 

incorporated herein by reference. 

form If 6 86COnd ClaS8lf 84 the " 96nerate3 9 decisi - in the 
form of a second validation signal 86, which may be logic 

values corresponding to YES or NO, or TRUE or FALSE, indicating 
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verification of the authenticity of the user sending the 
electronic transaction. Alternatively, the authentication 
decision may be a numerical value, for example, corresponding 
to a percentage of confidence of authenticity. The second 
5 classifier 86 may include a predetermined threshold of, for 
example, 98% authenticity, to be exceeded in order to proceed 
with the processing of the electronic transaction. 

The receiving section 42 shown in FIG* 5 may respond to 
the validation signals 82, 86 to process the transaction first 

10 data 50, such as an on-line purchase or an electronic funds 
transfer. Accordingly, transaction processing systems (not 
shown) may also be included in the receiving section 42. 
Alternatively, the receiving section 42 of FIG. 5 may be 
coupled to external transaction processing systems. 

15 In another alternative embodiment, the receiving section 

may include an AND circuit 88 shown in FIG. 5, such as a logic 
AND gate or other logic mechanisms, for generating a final 
validation signal 90 from the validation signals 82, 86. 
Accordingly, if and only if both of the classifiers 80, 84 

20 determine that the transaction biometric data 46 as well as the 
transaction first data 50 have been sufficiently securely 
transmitted over the network 60, then a final validation signal 
90 reflecting the security of the overall transaction is 
generated. 

25 Although the first classifier 80 is a perfect classifier; 

that is, only an exact match of the hash values generates an 
authentication, the second classifier 84 may generate 
percentages reflecting relative authenticity and/or scaled 
numerical values on an authenticity scale to reflect the error 

30 tolerance of the second classifier 84 and/or the cross -over 
error rates associated with biometrics. Accordingly, the 
application of fuzzy logic may be used to generate a crisp 
determination of the authenticity of the transaction biometric 
data 46 as the second validation signal 86. 

35 Using biometric certificates, cross-over error rates for 
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identification and authentication may be below about 2 0* and 

TZ SVe " ? 3lSO M ab ° Ut ° ™° plication of more 

advanced Mometrie input device3 „, „ ^ « ' 

known ln the art may obtain substantially perfect 
S authentication of any individual fro* the global population. 

The disclosed biometric certification system and method 
~y mclude electronic transactions using a network 

0»/"„ el/^Tn 15 ' aSSi9Md D Pate " C *PP»-tio„ No . 
,n ™ ' d Dece " ber 2 ». and entitled -VIRTUAL 

10 CERTIFICATE AUTHORITY, which is incorporated herein!^ 

reference. Such a system can be adapted to include the use of 
brometr.c certificates as described herein for 
cryptographioally binding the biometric data of a user with 
identification information to form such biometric certif cates 
15 The use of public key technology aUows the ""««>• 
transaction/signature authentication process to be done either 
centrally or remotely, depending upon the needs of cne 
transaction. 

While the disclosed biometric certification system *nH 

^ertc 3 rr 1 ^ ^ d — ^ -rein with 
reference to the preferred embodiments, it is to be understood 

hat various modifications in form and detail may be m^e 

therexn without departing from the scope and spirit of the 

25 ~ inVenti ° n - ACCOrd±n9ly ' Edifications: 

examples suggested herein, but not limited thereto, are to be 

considered within the scope of the present invention 
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CLAIMS 

WHAT IS CLAIMED IS : 

1. A biometric certification system for certifying an 
electronic transaction from a user, the electronic transaction 

5 including transaction biometric data, transaction first data, 
and a digital signature generated therefrom, the biometric 
certification system comprising: 

a biometric certificate extractor, responsive to a 
biometric certificate corresponding to user identification (ID) 
10 data included in the transaction first data, for extracting 
registration biometric data and a user public key therefrom; 

a decryptor, responsive to the registration biometric 
data and to the user public key, for retrieving a first hash 
value from the digital signature; 
15 a hash function, responsive to the transaction 

biometric data and the transaction first data, for generating a 
second hash value therefrom; and 

a first classifier for comparing the first hash value 
to the second hash value, and for generating a first validation 
20 signal to authenticate the transmission of the transaction 
first data and the transaction biometric data. 

2. The biometric certification system of claim 1, 
wherein the biometric certificate is in the form of a sequence, 

25 including: 

the registration biometric data; 
user input data; 
the public key of the user; and 
the digital signature. 

30 

3. The biometric certification system of claim 2, 
wherein the portion of the bit sequence including the first 
biometric data is greater than about 500 bytes in length. 

35 4. The biometric certification system of claim 1, 
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wherein the first classifier includes a processor for 
performing data matching procedures. 

5. The biometric certification system of claim 1, 
5 further comprising: 

b . , . * SeC ° nd ClaSSif ier tor comparing the registration 
biometric data and the transaction biometric data, and for 
generating a second validation signal to authenticate the user. 

10 6. The biometric certification system of claim l 

wherein the second classifier is a neural network trained from 
a set of biometric data stored in the biometric database. 

15 an e i ? V * bi ° metriC «~tification system for authenticating 
15 an electronic transaction involving a user, the electronic 

transaction including transaction biometric data, transaction 
first data, and a digital signature generated therefrom 
comprising: ' 

a transmitting section including: 

„ . 3 transaction biometric input device responsive 
to a set of physical characteristics of the user the 
transaction biometric input device generates corresponding 

the uL:. 0 " ^ data relatCd ^ Ph - iCal —itL of 



20 



:5 



a first hash function generator, responsive to 
transaction f irst data and the transaction biometric data! or 
generating a first hash value signal therefrom; 

digital sion*. ' d i 9ital S±9natUre * en ~ator which generates a 

a receiving section operatively connected to the 
transmitting section through a network t-h« ~ • 
including: network, the receiving section 

a biometric certificate extractor, responsive to 
a biometric certificate corresponding to user identification 
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(ID) data included in the transaction first data, for 
extracting registration biometric data and a user public key 
therefrom; 

a decryptor, responsive to the registration 
5 biometric data and to the user public key, for retrieving the 
first hash value from the digital signature; 

a second hash function generator, responsive to 
the transaction biometric data and the transaction first data, 
for generating a second hash value therefrom; and 
1° a first classifier for comparing the first hash 

value to the second hash value, and for generating a first 
validation signal to authenticate the transmission of the 
transaction first data and the transaction biometric data. 

15 8. The biometric certification system of claim 7, 

wherein the transaction biometric input device is a visual 
reader which obtains hand geometry images of the user to 
generate corresponding biometric data. 

20 9. The biometric certification system of claim 7, 

wherein the transaction biometric input device is a visual 
reader which obtains iris images of the user to generate, 
corresponding biometric data. 

25 10. The biometric certification system of claim 7, 

wherein the transaction biometric input device is a visual 
reader which obtains retinal images of the user to generate 
corresponding biometric data. 

30 11 » The biometric certification system of claim 7, 

wherein the transaction biometric input device is a visual 
reader which obtains facial images of the user to generate 
corresponding biometric data. 

35 12. The biometric certification system of claim 7, 
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wherein the transaction biometric input device is a visual 
reader wh ich obtains body images of the user to generate 
corresponding biometric data. 

5 13. The biometric certification system of claim 7 

wherein the transaction biometric input device includes: 
user; and ' tran8dUCSr that receive * -Beech from the 

a speech digitizer which digitizes the received 
10 speech to generate corresponding biometric data. 

14 . The biometric certification system of claim 7 
wherexn the second classifier is a neural network t~i „ , 
^ a set of biometric data stored in the Mc^a^T ^ 

furthe^'co^ilT" 0 CertifiCati ° n ~ * — 7. 

i * 3 l09iC ClrCUlt f ° r 9 eneratin 9 a final validation 
^ signal from the first and second validation signals. 

involving a f^V" ™ U - Btl «"«* « electronic transaction 
nvoivmg a first user, comprising the steps of: 

registering a user, including the steps of- 

receiving a registration set of physical 
characteristics of the user at * K<™ - • • P " ySlcal 

tne user at a biometric input device- 

generating registration biometric data 
corresponding to the registration set of physical 
characteristics; 

generating a biometric certificate f ™» ^ 

~„ WMetrlo ^ UMr input *™ » 

the user. ^ a digital si3nature; ^ P D11< = ke V •* 

t„ "" in9 the bi °">«ri- certificate i„ , mmBty , 
tranemtttxng an electronic transaction over a 

brcetrrc data, transaction first data, and a digital signature 
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generated therefrom, the step of transmitting including the 
steps of: 

receiving a current set of physical 
characteristics of the user; 
5 generating the transaction biometric data from 

the current set related to the physical condition of the user; 

generating a first hash value signal from the 
transaction first data and the transaction biometric data; 

generating the digital signature from the hash 
10 value and a private key signal of the user; and 

transmitting the digital signature over the 

network; and 

transmitting the transaction biometric data and 
the transaction first data over the network; and 
15 authenticating the electronic transaction, including 

the steps of: 

receiving the digital signature, the transaction 
biometric data and the transaction first data from the network; 

retrieving user identification (ID) data from 
20 the transaction first data; 

retrieving a biometric certificate corresponding 
to user ID data from a memory; 

extracting registration biometric data and the 
user public key from the biometric certificate; 
25 decrypting the digital signature using the user 

public key to retrieve the first hash value from the digital 
signature; 

generating a second hash value from the 
transaction biometric data and the transaction first data; 
30 comparing the first hash value to the second 

hash value using a first classier; 

generating a first validation signal to 
authenticate the transmission of the transaction first data and 
the transaction biometric data; 
35 comparing the registration biometric data and 
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the transaction biometric data using second classifier; and 

generating a second validation signal to 
authenticate the user. 

5 17. The method of claim 16, wherein the step of 

authenticating further comprises the steps of: 

ANDing the first and second validation signals. 



15 



20 



18. The method of claim 15, wherein the step of receiving 
^ set of p hy8 ical characteristics of the use, incLes t he ^ 

receiving visual characteristics of the user using a 
vxsual reader as the registration biometric input device 

19. The method of claim 15, wherein the step of receiving 
^set of p hy8i cal characteristics of the user includes Z T^Z 

speech diair 6 " 1119 8PeSCh Characteris "- of the user using a 
speech dxgxtxzer as the registration biometric input device 

20. The method of claim 15, wherein the step of 
generating the registration biometric data includes the step of 

llZT^ Mt 8eqUenCe 9reat6r ^ ab ° Ut 500 in " 

length as the registration biometric data. 
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